eUASBP: enhanced user authentication scheme based on bilinear pairing

摘要

One of the cryptographic services i.e., authentication is very essential for the servers to identify authorized users and to neglect unauthorized users. In this work, we have considered Awasthi's scheme and shown that the same scheme is vulnerable to several serious attacks. This paper not only describes the security pitfalls of Awasthi's scheme but also designs a new scheme using bilinear pairing to protect the system from existing security drawbacks with other attractive features like strong mutual authentication, smart card stolen threat protection. Strong security ofeUASBPis ensured through security analysis ofeUASBPbased on BAN logic.eUASBPreaches the BAN logic goals by the application of BAN rules. Our informal security analysis shows that proposedeUASBPprovides security against attacks possible with smart card based applications. In addition to thateUASBPprovides mutual authentication, session key agreement, and early wrong password detection. Bayat et al. authentication scheme also provides security against possible attacks of smart card based applications but doesn't support session key agreement and early wrong password detection. Computation cost ofeUASBPis less when compared with other authentication schemes. SinceeUASBPuses less number of bilinear operations when compared with other related authentication schemes. The performance analysis shows that our protocol is more secure in comparison with state of the art and also better in terms of storage, computation and communication overheads.